I agree. that we have to have some trust.
Don't know if I am allowed to give a example.
But I recently gave information to a nt db where the site url was advertised under the player.
After give the login information I ended up at a pages where I have no rights and can't see a thing.
I managed to browse the site and found out thats some pages was not allowed. Others I was allowed to see, suddenly I can see information about all my players which I didn't expect since it was for NT purpose.
The front page only shows a login prompt without any information at all.
I do think that when you can make a site with multiple functions, then you should also be able to make a front page telling what the site is about. What information is given.
If you could have a site login, then some simple requirements could be checked before it is allowed.